e20680ceb43e31cb8a421d53b0c3e00998f77043236545222e5ff3027da242c0

Analysis

max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/05/2026, 16:15

Target
2026-05-22_49a4b006b89de67219ac45af5c6f7ae3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 5.5MB
Sample260522-tqa2asht8n
SHA256 e20680ceb43e31cb8a421d53b0c3e00998f77043236545222e5ff3027da242c0
MD5 49a4b006b89de67219ac45af5c6f7ae3
SHA1 bc16f159cdbd5efecf9337d100534e9f24463c56
SHA512 c56761ca5be18b85131246cc7867d4c594bd0f6b6df2a43b3c01ac0d24b52d93bf855c5fbaa870f3f2a6457ec92b53c1b59afe610732cc15b48a162429e9a946
SSDEEP 49152:Dk+y54R2YbUIC3+Z6syY2jHKyGJ0ZrOKrTUYVknR/rvpS4ndeF0XR6Asy/jVBrQG:M+iVSIi28NKFbcNh9
TLSH
T1A646E834E658415DD07BD079AF47CD8AE7B4B84B43316FE3509409612BCEEA06AFE6C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4712	2026-05-22_49a4b006b89de67219ac45af5c6f7ae3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
4712	2026-05-22_49a4b006b89de67219ac45af5c6f7ae3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-22_49a4b006b89de67219ac45af5c6f7ae3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-22_49a4b006b89de67219ac45af5c6f7ae3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4712